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Amendments to the Claims 

1 . (currently amended) A cryptography engine for performing cryptographic 
operations on a data block, the cryptography engine comprising: 

a key scheduler configured to provide keys for cryptographic operations; 

expansion logic coupl e d to th e multipl e xer circuitry, th e e xpansion logic 
configured to expand a first bit sequence having a first size to an expanded first bit 
sequence having a second size greater than the first size, the first bit sequence 
corresponding to a right p ortion of an input bit sequence for the current cryptographic 
round th e data block ; 

first circuitry configured to perform an exclusive OR (XOR) on the expanded 
first bit sequence and a key provided by the key scheduler to generate a third bit 
sequence; 

a substitution box (SBox) configured to transform the third bit sequence into a 
fourth bit sequence; 

second circuitry configured to perform an exclusive OR (XOR) on the fourth bit 
sequence and a left portion of the input bit sequence for the current cryptographic round 
to generate a fifth bit sequence; 

permutation logic coupled to the expansion logic and the second circuitry , the 
permutation logic configured to receive the fifth bit sequence from the second circuitry 
and to perform a permutation of the fifth bit sequence, 

wherein the fifth bit sequence is a right portion of an output bit sequence of a 
current cryptographic round, alt e r a s e cond bit s e quenc e corr e sponding to the portion of 
th e data block; and 
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a plurality of logic d e vices simulating an XOR op e ration for combining a k e y 

provided by tho k e y sch e dul e r with th e e xpand e d first bit s e qu e nc e , th e plurality of logic 

devices including a multiplex e r r e c e iving first and s e cond input valu e s and an OR logic 

combining an output valu e of th e multipl e x e r with a third input valu e , th e first, s e cond, 

and third input valu e s b e ing d e t e rmin e d bas e d on th e k e y provid e d by th e k e y sch e dul e r 

and further bas e d on a select valu e indicativ e of wh e th e r a current cryptographic 

operation is to occur during an initial round of a particular seri e s of rounds of 

cryptographic operations. 

2. (canceled) 

3. (original) The cryptography engine of claim 1, wherein the cryptography 
engine is a DES engine. 

4. (currently amended) The cryptography engine of claim 1 further comprising 
[[a]] two-level multiplexer circuitry , wherein a first level of the two-level multiplexer is 
configured to receive an inverse permutation of a first portion of an input bit sequence 
and an inverse permutation of a second portion of the input bit sequence during an initial 
cryptographic round and a right portion of an output bit sequence from a previous 
cryptographic round during a subsequent cryptographic round and wherein a second 
level of the two-level multiplexer is configured to receive the output of the first level and 
the right portion of the output bit sequence generated during the previous cryptographic 
round, r e c e iving initial data or f ee dback data from a pr e vious round of cryptographic 
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proc e ssing, th e multiplier circuitry including two 2 to 1 multiplex e rs on a first lev e l 

coupl e d to two 2 to 1 multipl e x e rs on a second lovol. 

5. (original) The cryptography engine of claim 1, wherein the first bit sequence is 
less than 32 bits. 

6. (original) The cryptography engine of claim 1 , wherein the first bit sequence is 
four bits. 

7. (original) The cryptography engine of claim 5, wherein the expanded first bit 
sequence is less than 48 bits. 

8. (original) The cryptography engine of claim 6, wherein the expanded first bit 
sequence is less than six bits. 

9-12. (canceled) 

13. (original) The cryptography engine of claim 1, wherein the key scheduler 
performs pipelined key scheduling logic. 

14. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a plurality of stages. 
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15. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a determination stage. 

16. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a shift stage. 

17. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a propagation stage. 

18. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a consumption stage. 

19. (previously presented) The cryptography engine of claim 1, wherein a first 
shift amount for a first key is identified in a determination stage using a first round 
counter value. 

20. (canceled) 

21. (currently amended) The cryptography engine of claim 4 [[20]], wherein the 
two-level multiplexer is configured to swap a left portion of the output bit sequence of a 
previous cryptographic round with a right portion of the output bit sequence of the 
previous cryptographic round, whereby the right portion of the input bit sequence of the 
previous cryptographic round becomes the left portion of an input bit sequence for the 
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current cryptographic round and the fifth bit sequence becomes a right portion of the 
input bit sequence for the current cryptographic round s e l e ct e ith e r initial data, swapp e d 
data, or non swapp e d data to provid e to th e output stage of the multiplexor . 

22. (canceled) 

23. (currently amended) An integrated circuit layout associated with a 
cryptography engine for performing cryptographic operations on a data block, the 
integrated circuit layout providing information for configuring the cryptography engine, 
the integrated circuit layout comprising: 

a key scheduler configured to provide keys for cryptographic operations; 

expansion logic coupl e d to th e multipl e x e r circuitry, th e e xpansion logic 
configured to expand a first bit sequence having a first size to an expanded first bit 
sequence having a second size greater than the first size, the first bit sequence 
corresponding to a right p ortion of an input bit sequence for the current cryptographic 
round the data block ; 

first circuitry configured to perform an exclusive OR (XOR) on the expanded 
first bit sequence and a key provided by the key scheduler to generate a third bit 
sequence; 

a substitution box (SBox) configured to transform the third bit sequence into a 
fourth bit sequence; 
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second circuitry configured to perform an exclusive OR (XOR) on the fourth bit 
sequence and a left portion of the input bit sequence for the current cryptographic round 
to generate a fifth bit sequence; 

permutation logic coupled to the expansion logic and the second circuitry, the 
permutation logic configured to receive the fifth bit sequence from the second circuitry 
and to perform a permutation of the fifth bit sequence, 

wherein the fifth bit sequence is a right portion of an output bit sequence of a 
current cryptographic round. 

alt e r a s e cond bit s e qu e nc e corr e sponding to th e portion of th e data block, and 

a plurality of logic d e vic e s simulating an XOR op e ration for combining a k e y 
provid e d by tho key scheduler with th e e xpanded first bit sequence, the plurality of logic 
devices including a multipl e x e r r e c e iving first and second input valu e s and an OR logic 
combining an output valu e of th e multipl e x e r with a third input valu e , th e first, s e cond, 
and third input valu e s b e ing d e t e rmin e d bas e d on th e k e y provid e d by th e k e y sch e dul e r 
and furth e r bas e d on a s e l e ct value indicative of whether a current cryptographic 
op e ration is to occur during an initial round of a particular s e ri e s of rounds of 
cryptographic op e rations . 

24. (canceled) 

25. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein the cryptography engine is a DES engine. 
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26. (currently amended) The integrated circuit layout cryptography e ngine of 
claim 23 further comprising [[a]] two-level multiplexer circuitry , wherein a first level of 
the two-level multiplexer is configured to receive an inverse permutation of a first 
portion of an input bit sequence and an inverse permutation of a second portion of the 
input bit sequence during an initial cryptographic round and a right portion of an output 
bit sequence from a previous cryptographic round during a subsequent cryptographic 
round and wherein a second level of the two-level multiplexer is configured to receive 
the output of the first level and the right portion of the output bit sequence generated 
during the previous cryptographic round, r e c e iving initial data or f ee dback data from a 
pr e vious round of cryptographic proc e ssing, th e multipli e r circuitry including two 2 to 1 
multipl e xers on a first l e v e l coupl e d to two 2 to 1 multipl e x e rs on a s e cond l e v e l. 

27. (currently amended) The integrated circuit layout cryptography engine of 
claim 23, wherein the first bit sequence is four bits. 

28. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 27, wherein the expanded first bit sequence is less than six bits. 

29. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein the key scheduler performs pipelined key scheduling logic. 

30. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein the key scheduler comprises a determination stage. 
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3 1 . (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein the key scheduler comprises a shift stage. 

32. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein the key scheduler comprises a propagation stage. 

33. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein the key scheduler comprises a consumption stage. 

34. (currently amended) The integrated circuit layout cryptography e ngin e of 
claim 23, wherein a first shift amount for a first key is identified in a determination stage 
using a first round counter value. 

35. (canceled) 

36. (currently amended) The integrated circuit layout cryptography engin e of 
claim 26_[[35]] 5 wherein the two-level multiplexer is configured to swap a left portion of 
the output bit sequence of a previous cryptographic round with a right portion of the 
output bit sequence of the previous cryptographic round, whereby the right portion of the 
input bit sequence of the previous cryptographic round becomes the left portion of an 
input bit sequence for the current cryptographic round and the fifth bit sequence becomes 
a right portion of the input bit sequence for the current cryptographic round sel e ct e ith e r 

Atty. Dkt. No. 1875.9090002 



- 10- 



QI et al 
Appl. No. 09/892,242 



initial data, swapped data, or non swapp e d data to provide to th e output stag e of th e 
multipl e x e r . 

37. (canceled) 

38. (new) The cryptography engine of claim 1, wherein the first circuitry 
comprises: 

a plurality of logic devices simulating an XOR operation for combining the key 
provided by the key scheduler with the expanded first bit sequence, the plurality of logic 
devices including a multiplexer receiving first and second input values and an OR logic 
combining an output value of the multiplexer with a third input value; 

wherein the first, second, and third input values are determined based on the key 
provided by the key scheduler and further based on a select value indicative of whether a 
current cryptographic operation is to occur during an initial round of a particular series of 
rounds of cryptographic operations. 

39. (new) The cryptographic engine of claim 4, wherein the cryptographic engine 
is configured to perform 3DES. 

40. (new) The cryptographic engine of claim 39, wherein the two-level 
multiplexer is configured to select the right portion of a final round of a previous 16- 
round DES operation as the right portion of the input bit sequence for a first round of a 
subsequent 16-round DES operation and to select the left portion of the final round of the 
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previous 16-round DES operation as the left portion of the first round input sequence of 
the subsequent 16-round DES operation. 

41. (new) The cryptographic engine of claim 4, wherein the first level comprises: 

a first two to one multiplexer, and 
a second two to one multiplexer; and 
wherein the second level includes: 

a third two to one multiplexer coupled to the first two to one multiplexer, 

and 

a fourth two to one multiplexer coupled to the second two to one 

multiplexer. 

42. (new) The cryptographic engine of claim 1, wherein the expansion logic 
comprises: 

a first expansion logic block coupled to the first circuitry and configured to 
receive the first bit sequence; and 

a second expansion logic block coupled to the second circuitry and to the first 
circuitry configured to receive the fifth bit sequence from the second circuitry. 

43. (new) The cryptographic engine of claim 1, further comprising: 

a first asynchronous FIFO configured to convert input blocks of a third size to 
blocks of a fourth size for cryptographic processing; and 
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a second asynchronous FIFO configured to convert cryptographic output blocks 

of a fourth size to a third size for further processing. 

44. (new) A method for performing an accelerated multiple round cryptographic 
operation in a cryptographic engine having performance and expansion logic in a non- 
timing critical path, comprising: 

performing an initial cryptographic round, wherein the step of performing the 
initial cryptographic round includes: 

determining an inverse permutation of a first portion of an input sequence, 
wherein the first portion of the input sequence is set as a left portion of an input bit 
sequence for the initial round, 

determining an inverse permutation of a second portion of the input 
sequence, wherein the second portion of the input sequence is set as the right portion of 
the input bit sequence for the initial round, 

expanding the first portion of the input sequence to generate an expanded 

first portion, 

exclusively ORing the expanded first portion with an initial round key 
generated by a key scheduler to generate a first bit sequence, 

transforming the first bit sequence to a second bit sequence using a 
substitution box, 

exclusively ORing the second bit sequence with the left portion of the 
input bit sequence for the initial round to generate a right portion of an output bit 
sequence for the initial round; and 
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performing a subsequent cryptographic round, the step of performing the 

subsequent cryptographic round includes: 

receiving the right portion of the input bit sequence of the initial round 
and selecting the right portion of the input bit sequence of the initial round as the left 
portion of an input bit sequence of the subsequent round, 

determining the permutation of the right portion of the output bit sequence 
of the previous cryptographic round, wherein the result of the permutation is a third bit 
sequence, 

expanding the third bit sequence to generate an expanded third bit 

sequence, 

exclusively ORing the expanded third bit sequence with a round key for 
the subsequent cryptographic round to generate a fourth bit sequence, 

transforming the fourth bit sequence to a fifth bit sequence using the 
substitution box, 

exclusively ORing the fifth bit sequence with the left portion of the input 
bit sequence for the current round to generate a right portion of an output bit sequence 
for the subsequent cryptographic round. 
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